4 ms·
The vulun is in the fact that the program blindly trusts incoming HTTP based only on a nonce being in both the body and a header.
by SahAssar 9y ago
The vulun is in the fact that the program blindly trusts incoming HTTP based only on a nonce being in both the body and a header.
- benchaney 9y agoNo, the "vuln" is assuming that only users on the machine can access localhost. This is a completely reasonable assumption, and it is on the browsers for invalidating it.